Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B6501EE8EF7F11EF930CE956762E951A.roa
File: B6501EE8EF7F11EF930CE956762E951A.roa (raw, json)
Hash identifier: 5dCtEVhkHVnyABy5NqSayQPwVy8cYKCsmN+RRQacBxc=
Subject key identifier: AB:2A:B5:90:68:97:26:CD:F2:6B:B0:68:43:3E:2E:54:3D:1D:76:04
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0125CA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B6501EE8EF7F11EF930CE956762E951A.roa
Signing time: Thu 20 Feb 2025 11:42:07 +0000
ROA not before: Thu 20 Feb 2025 11:42:01 +0000
ROA not after: Thu 20 Mar 2025 11:42:01 +0000
asID: 54600
IP address blocks: 156.239.24.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75210 (0x125ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 20 11:42:01 2025 GMT
Not After : Mar 20 11:42:01 2025 GMT
Subject: CN=67b7150f-db96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:72:d1:fb:ed:b1:5d:c3:2d:39:cb:5c:65:1e:
45:79:81:4e:fc:63:d7:9d:2c:0b:ae:5d:f1:27:de:
7c:69:50:9d:10:7d:72:bb:f8:26:c5:eb:25:5e:99:
19:88:f9:c9:fc:1a:54:3c:53:9b:81:24:40:60:79:
96:de:8c:30:11:9c:2f:c8:7d:92:6b:aa:b3:a7:23:
19:e0:9b:49:08:7c:10:6d:c0:42:0c:64:f9:5f:5e:
a1:b7:d5:78:1a:13:69:60:22:10:83:64:52:07:ea:
b9:26:f8:00:ed:0b:61:33:89:ec:d5:48:b2:28:15:
a4:1e:f2:dd:96:51:7f:20:fd:ae:9b:83:fa:5a:6d:
71:77:1a:53:18:90:25:fa:f1:48:31:ff:6a:a9:00:
b1:35:10:c6:a0:16:a3:62:ec:07:ea:7f:01:7b:0d:
82:aa:97:11:1b:39:01:eb:5a:89:0c:31:e2:e6:82:
eb:55:ec:25:16:b3:c5:68:c6:8b:b1:c0:7d:11:aa:
36:cc:b8:d7:8e:24:aa:62:b7:62:8f:09:1d:ad:9f:
c1:f9:6f:c8:fd:b9:81:7e:57:7a:3a:06:f8:40:3b:
4e:2e:37:06:55:26:fe:24:17:3d:c5:3d:15:47:01:
d5:bc:da:cb:54:17:88:61:b7:2f:53:7b:74:19:81:
1a:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:2A:B5:90:68:97:26:CD:F2:6B:B0:68:43:3E:2E:54:3D:1D:76:04
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B6501EE8EF7F11EF930CE956762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.239.24.0/21
Signature Algorithm: sha256WithRSAEncryption
0c:43:48:03:33:e8:d8:75:9a:92:b1:25:0e:a9:af:6c:d3:6f:
8b:57:b3:99:9a:5f:3e:77:e8:6f:f8:6d:0a:30:db:30:8f:7f:
ba:4b:7e:27:d7:ee:6d:e5:71:7a:b5:c3:3b:c6:85:24:9c:4e:
00:28:66:52:57:40:63:fe:d7:53:93:8c:ba:17:5e:d3:0c:9a:
dd:09:7b:d7:c9:1c:62:76:ba:2d:ab:34:11:f2:e1:bf:f7:7a:
fb:63:70:cd:ce:f3:ab:22:96:fa:95:4d:34:da:d9:de:74:b9:
bd:1b:33:f6:63:ff:b4:de:30:8e:3d:95:a8:ab:be:59:a3:b7:
cd:79:8f:cf:7b:62:bd:ea:82:20:ef:5a:b0:b7:b8:46:2a:d7:
65:4c:fe:d2:40:ee:ba:89:b1:fd:98:76:d7:2d:b4:12:50:d4:
40:75:7e:dc:75:dc:84:ae:82:0e:f1:ca:c5:d5:d5:40:11:33:
08:52:ec:ea:f2:ca:fb:96:ea:59:6e:d2:09:3e:18:38:85:4d:
f3:a3:56:0d:60:6f:01:74:72:53:0f:ce:fb:b5:da:6b:0e:bf:
ba:88:6e:3c:38:d6:8b:cf:8b:f4:9f:64:5e:61:b8:e7:fd:54:
b4:08:73:54:a8:1d:3a:e6:7a:a4:da:f1:fe:65:0c:01:2d:89:
1e:08:4e:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 09:46:29 2025 by rpki-client